IT Act 2000 and Amendments is part of Information and Communication Technology. Below are notes on 12 sub-topics, followed by practice MCQs from State PSC and UPSC papers.

Certifying Authority (CA)

An entity licensed under the IT Act, 2000 to issue

Digital Signature Certificates (DSCs).

  • CA Licensing Section A license to issue Digital Signature Certificates is granted to a Certifying Authority under

Section 24 of the IT Act, 2000.

  • Controller of Certifying Authorities (CCA) The regulatory body established under the IT Act, 2000.

CCA's Primary Role

To

regulate Certifying Authorities (CAs), supervise their activities, lay down standards, and oversee the overall framework for the issuance and management of Digital Signature Certificates.

framework for the issuance and

management of Digital Signature

Certificates.

  • CCA Functions Grants, renews, suspends, or revokes licenses of CAs; maintains a database of CAs; ensures adherence to specified standards for secure digital transactions.

Key Definitions under the IT Act (e.g., electronic record, digital signature, intermediary)

digital

signature,

intermediary)

  • Electronic Record (IT Act 2000, Sec 2(1) (t)): Data, record, or data generated, image, sound stored, recorded, or transmitted in electronic form.
  • Digital Signature (IT Act 2000, Sec 2(1) (p)): Authentication of electronic records using asymmetric crypto system and hash function. (Note: Concept superseded by 'Electronic Signature' via IT (Amendment) Act 2008, broadening the scope).
  • Certifying Authority (CA) (IT Act 2000, Sec 2(1)(g)): Entity licensed to issue Digital Signature Certificates (DSCs) and bind public keys to identities.
  • Intermediary (IT Act 2000, Sec 2(1)(w)): Any person who on behalf of another person receives, stores, or transmits an electronic record or provides any service with respect to that record. Examples include telecom service providers, network service providers, internet service providers, web-hosting service providers, search engines, online payment sites, online auction sites, online marketplaces, and social media intermediaries.
  • Information Technology (IT) Act, 2000: Primary legislation providing legal recognition to electronic records and digital signatures in India.
  • IT Act, 2000: Aims to facilitate electronic governance and prevent cybercrimes.
  • Digital Signatures: Legal recognition provided by the Information Technology Act, 2000.
  • Section 5 of IT Act, 2000: Specifies the legal recognition of digital signatures, stating that where a law requires a signature, that requirement is satisfied by an authentic digital signature.
  • Section 3 of IT Act, 2000: Details the method of authentication of electronic records using digital signatures.

Provisions for E-Governance and Electronic Contracts

  • IT Act 2000 establishes legal framework for E-governance and Electronic Contracts in India.

equating them with written, typed, or

printed documents.

  • Section 5 (IT Act 2000): Legal Recognition of Electronic Signatures – Provides legal recognition for electronic signatures, making them equivalent to physical signatures.
  • Section 6 (IT Act 2000): Use of Electronic Records and Electronic Signatures in Government and its Agencies – Facilitates electronic filing of documents, issuance of licenses/permits, and receipt/payment of money by government bodies.
  • Section 7 (IT Act 2000): Retention of Electronic Records – Allows for the legal retention of information in electronic form, provided it remains accessible, identifiable, and its integrity is maintained.
  • Section 8 (IT Act 2000): Publication of Rules, Regulations, etc. in Electronic Gazette – Enables the publication of official rules, regulations, notifications, and other official documents in an Electronic Gazette.
  • Section 9 (IT Act 2000): No Right to Insist on Electronic Transaction – States that unless specifically provided, no person has a right to insist on dealing with government agencies solely through electronic means.
  • Electronic Contracts (IT Act 2000) Validated by the legal recognition of electronic records (Section 4) and electronic signatures (Section 5), adhering to principles of the Indian Contract Act, 1872.

Purpose and Scope of the Information Technology Act 2000

  • Information Technology (IT) Act, 2000: Enacted to provide legal recognition for electronic transactions (e-commerce) and electronic governance.
  • Primary purpose and scope: Facilitates electronic filing of documents, grants legal validity to digital signatures, and establishes a legal framework for dealing with cybercrimes.
  • It is the primary legislation dealing with cybersecurity in India.
  • The IT Act, 2000 was significantly amended in 2008 (Information Technology (Amendment) Act, 2008), strengthening provisions related to cybersecurity and cybercrime.
  • Both the IT Act, 2000, and the Indian Penal Code (IPC), 1860, are utilized to address various forms of cybercrimes in India.

Significant Amendments introduced by IT (Amendment) Act 2008

  • The Information Technology (Amendment) Act, 2008, *amended* the principal Information Technology Act, 2000.
  • IT Act, 2000 is India's primary legislation governing cybercrime and electronic commerce.
  • Significant amendments introduced by IT (Amendment) Act, 2008:
    • Inserted Section 43A: Compensation for failure to protect data.
    • Introduced Section 66A: Punishment for sending offensive messages (later struck down by Supreme Court in Shreya Singhal vs. Union of India).
    • Expanded powers for interception, monitoring, decryption (Section 69) and blocking public access to information (Section 69A).
    • Modified intermediary liability (Section 79), providing "safe harbour" provisions.
    • Increased penalties for various cyber offenses and introduced new definitions relevant to evolving cyber threats.
  • The proposed Digital India Act, 2023 is intended to replace the Information Technology Act, 2000.

20. Government Digital Platforms (e-

Practice MCQs: IT Act 2000 and Amendments

Certifying Authorities and Digital Signature Certificates

  1. Under which Section of IT Act, 2000 has Certifying Authority (CA) been granted a licence to issue a digital signature certificate ?

    Asked in: Animal Husbandry and Veterinary Science

    1. Section 65
    2. Section 24
    3. Section 43
    4. Section 42
    Show answer

    Answer: D. Section 42

    Section 42 of the IT Act, 2000 deals with the licensing of Certifying Authorities, which is crucial for the legal validity of digital signatures.

  2. What is primary role of Controller of Certifying Authorities (CCA)? A. Regulate Financial Transactions B. Issuance and management of digital certificates C. Manage e-commerce websites D. Control Internet services providers

    Asked in: Assistant Director (Horticulture) Exam 2023 · OPSC CS Prelims 2021

    1. Regulate Financial Transactions
    2. Issuance and management of digital certific‐ ates
    3. Manage e-commerce websites
    4. Control Internet services providers
    Show answer

    Answer: B. Issuance and management of digital certific‐ ates

    C. Microsoft D. Apple Ans: B The acquisition of Wickr by AWS was announced in June 2021. Wickr is known for providing end-to- end encrypted messaging, video conferencing, and file sharing services with a strong focus on privacy and security features like message expiry. The CCA is the regulatory authority that supervises and controls the activities of Certifying Authorities (CAs) in issuing and managing Digital Signature Certificates (DSCs), which are crucial for secure online transactions and authentication.

Key Definitions under the IT Act (e.g., electronic record, digital signature, intermediary)

  1. Important concept(s) introduced in IT Act, 2000

    Asked in: MPPSC CS Prelims 2021

    1. Electronic Record
    2. Digital Signature
    3. Certifying Authority
    4. All of the above
    Show answer

    Answer: D. All of the above

    The Information Technology Act, 2000 was the first comprehensive law in India dealing with cybercrime and e-commerce. It provided legal recognition for electronic records and digital signatures, paving the way for secure electronic transactions. It also established the framework for Certifying Authorities (CAs) to issue digital signature certificates.

  1. Legal recognition to the digital signature is given by which Act?

    Asked in: Assistant District Public Prosecution Officer Examination 2021

    1. Indian Evidence Act
    2. Information Technology Act
    3. Reserve Bank of India Act
    4. Bankers' Books Evidence Act
    Show answer

    Answer: B. Information Technology Act

    The Information Technology Act, 2000, grants legal recognition to digital signatures in India.

  2. Legal recognition of Digital Signature is described in which Section of IT Act ?

    Asked in: Forest Service Main Examination 2020

    1. Section 2
    2. Section 3
    3. Section 4
    4. Section 5
    Show answer

    Answer: C. Section 4

    Section 4 of the IT Act, 2000, states that where any law requires information to be in writing, authenticated, or preserved, or requires a contract to be in writing, or requires a signature on a document, or requires or permits any lawful payment, then notwithstanding anything contained in such law, such requirement shall be deemed to be met if information is authenticated by a digital signature, affixed in such manner as the Central Government may prescribe.

Provisions for E-Governance and Electronic Contracts

  1. Match the following provisions of the Information Technology Act, 2000 regarding e-governance : (i) Sec‐ (a) Legal recognition of records tion 5 (b) Legal recognition of electronic sig‐ (ii) Secnatures tion 4 (c) Use of electronic records and elec‐ (iii) tronic signatures in government and Section its agencies 8 (iv) (d) Publication of rules, regulations, Section etc. in the electronic gazette 6 Code : (a) (b) (c) (d)

    Asked in: CGPSC Prelims Exam 2022

    1. (i) (ii) (iii) (iv)
    2. (ii) (i) (iv) (iii)
    3. (iii) (iv) (ii) (i)
    4. (iv) (iii) (i) (ii)
    Show answer

    Answer: B. (ii) (i) (iv) (iii)

    The Information Technology Act, 2000 provides a legal framework for electronic governance by giving legal recognition to electronic records, electronic signatures, and enabling the use of electronic means for government services and publications.

Purpose and Scope of the Information Technology Act 2000

  1. Which of the following ITK Act came into existence in the year 2002 ?

    Asked in: Agri. Officer 2020

    1. The Geographical Indications of Goods (Re‐ gistration & Protection) Act
    2. Protection of Plant Varieties & Farmer's Rights Act
    3. The Biodiversity Act
    4. Scheduled Tribes and Other Traditional Forest Dwellers (Recognition of Forest Rights) Act
    Show answer

    Answer: A. The Geographical Indications of Goods (Re‐ gistration & Protection) Act

    This question tests knowledge of the enactment years of specific Indian legislative acts. It's important to recall the exact year of commencement for these acts.

  2. Consider the following statements and select the correct ones using the codes given below : (i) The primary legislation dealing with cybersecurity in India is the Information Technology (IT) Act, 2000. (ii) The Information Technology (IT) Act, 2000 was amended in 2008. (iii) India uses the Information Technology (IT) Act, 2000 and its amendments and also the Indian Penal Code (IPC), 1860 to deal with cybercrimes. (iv) India uses the Information Technology (IT) Act, 2000 and not the Indian Penal Code (IPC), 1860 to deal with cybercrimes. Codes :

    Asked in: SrInfoPR 18 2023 2912 2023

    1. (i) only
    2. (ii) only
    3. (i), (iii)
    4. (ii), (iii)
    Show answer

    Answer: C. (i), (iii)

    The legal framework for addressing cybercrimes in India involves a dual approach, leveraging both the specialized Information Technology (IT) Act, 2000 (and its amendments) and existing criminal laws like the Indian Penal Code (IPC), 1860. The IT Act was amended in 2008 to enhance its scope and effectiveness.

  3. Government Digital Platforms (e-Kranti, UMANG, MyGov, DigiLocker, etc.) 9. When the first Information Technology Act was passed in India to provide the legal framework for E-Commerce and to deal with cyber crimes ?

    Asked in: State Forest Service Main Examination paper2 2019

    1. 1996
    2. 2000
    3. 2006
    4. 2016
    Show answer

    Answer: B. 2000

    The Information Technology Act, 2000 (often referred to as IT Act, 2000) is the primary legislation in India dealing with cybercrime and electronic commerce.

Significant Amendments introduced by IT (Amendment) Act 2008

  1. Digital India Act, 2023 will replace which of the following ?

    Asked in: HPPSC HPAS Prelims 2023

    1. Information Technology Act, 2008
    2. Information Technology Act, 2020
    3. Information Technology Act, 2000
    4. Information Technology Act, 2011
    Show answer

    Answer: C. Information Technology Act, 2000

    The IT Act, 2000 is the principal law governing information technology and cybercrime in India. The Digital India Act is being drafted to update this framework in line with rapid technological advancements and evolving digital challenges.